From ddb2c4d69d6ac8c85e1cc49d75efce5cd3867176 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Mike=20F=C3=A4hrmann?= <mike_faehrmann@web.de>
Date: Fri, 31 Jan 2025 20:36:41 +0100
Subject: [PATCH] [executables] fix SSLError when using HTTPAdapter (#6393)

always load certifi certificates instead of relying on
'load_default_certs()', which might load no certs at all
---
 gallery_dl/extractor/common.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/gallery_dl/extractor/common.py b/gallery_dl/extractor/common.py
index 13fd88a5..d58db6ff 100644
--- a/gallery_dl/extractor/common.py
+++ b/gallery_dl/extractor/common.py
@@ -915,7 +915,7 @@ def _build_requests_adapter(ssl_options, ssl_ciphers, source_address):
             options=ssl_options or None, ciphers=ssl_ciphers)
         if not requests.__version__ < "2.32":
             # https://github.com/psf/requests/pull/6731
-            ssl_context.load_default_certs()
+            ssl_context.load_verify_locations(requests.certs.where())
         ssl_context.check_hostname = False
     else:
         ssl_context = None